2.5.2.7

Release 2.5.2.7

What's New

dependencies

Other changes

• n/a

Bugs fixed:

• C SDK no longer applies offline_access scope
• C SDK no longer fails OIDC auth when external url ends with /

2.5.2.6

Release 2.5.2.6

What's New

• properly handle secondary auth by ext jwt

Other changes

• n/a

Bugs fixed:

• n/a

Dependencies

• ziti-tunneler: v1.3.7
• ziti-sdk: 1.3.5
• tlsuv: v0.33.2[OpenSSL 3.3.1 4 Jun 2024]

2.5.2.5

Release 2.5.2.5

What's New

• nothing - bugfixes

Other changes

• dependency updates

Bugs fixed:

• none

Dependencies

• ziti-tunneler: v1.3.7
• ziti-sdk: 1.3.5
• tlsuv: v0.33.2[OpenSSL 3.3.1 4 Jun 2024]

2.5.2.4

Release 2.5.2.4

What's New

• nothing - bugfix

Other changes

• issue 779 - changed on hover to on click for initiating external provider auth

Bugs fixed:

• none

Dependencies

• ziti-tunneler: v1.3.5
• ziti-sdk: 1.3.4
• tlsuv: v0.33.1[OpenSSL 3.3.1 4 Jun 2024]

2.5.2.3

Release 2.5.2.3

What's New

• nothing - bugfix

Other changes

• none

Bugs fixed:

• issue 776 - Asking for feedback log takes too long

Dependencies

• ziti-tunneler: v1.3.3
• ziti-sdk: 1.3.2
• tlsuv: v0.32.9[OpenSSL 3.3.1 4 Jun 2024]

2.5.2.2

Release 2.5.2.2

What's New

• Lots of new stuff in this release!
• OIDC Auth Code Flow + PKCE
• Add Identity button now supports adding an identity by JWT or by URl
  • JWT behavior remains the same
  • support has been added for joining a network by 3rd party CA
  • support added for joining an OpenZiti network v1.2+ by URL. Note, the URL must be
    preconfigured with trust from the OS trust store. Unverifiable URLs cannot be used.
• Keychain support is added! The OpenZiti C SDK uses the
  tlsuv library which as integrated with
  Windows "Cryptography API: Next Generation"
  to support storing private key material through OS API calls. While this can be disabled
  if necessary, it is enabled by default and should remain enabled unless you are sure
  that it shouldn't be.

OIDC Auth Code flow + PKCE

If you are using an OpenZiti controller version 1.2 or higher, you are now able to use
anExternal JWT Signer
to authenticate to the overlay. When configured, you can join the network by using either
the network JWT (downloaded from the ZAC or extracted from the controller's /network-jwts endpoint)

If there are more than one ext-jwt-signers configured, new controls on the item details page will let
the user configure a default external auth provider. When a default is configured, simply clicking the
new "authorize IdP" icon.

Other changes

• removed "add identity" button from the bottom of the screen
• pointers now change to indicate an element is a drag point
• tooltips added to 'Z' icon
• right click on the main screen 'Z' icon to reattach a window
• various UI presentation improvements

Bugs fixed:

• the UI now knows if it's connected or disconnected and shows the label appropriately
• when disabling the UI the lower portion no longer looks truncated

Dependencies

• ziti-tunneler: v1.3.2
• ziti-sdk: 1.3.2
• tlsuv: v0.32.9[OpenSSL 3.3.1 4 Jun 2024]

2.5.1.2

Release 2.5.1.2

What's New

• nothing - bugfix

Other changes

• none

Bugs fixed:

• Rolls back the TLS engine to mbedTLS for now, so identities can write a new CA bundle if needed

Dependencies

• ziti-tunneler: v1.1.4.2
• ziti-sdk: 1.0.9

2.5.1.1

Release 2.5.1.1

What's New

• bugfix

Other changes

• none

Bugs fixed:

• issue 760 - stall detector operated too quickly. tamed to 60s from 15s and allowed for configuration

Dependency Updates

n/a

2.5.1.0

Release 2.5.1.0

What's New

• installer no longer verifies internet connectivity

Other changes

• none

Bugs fixed:

• none

Dependency Updates

n/a

2.5.0.15

Release 2.5.0.15

What's New

• nothing yet

Other changes

• none

Bugs fixed:

• none

Dependency Updates

• ziti-tunneler: v1.2.5
• ziti-sdk: 1.1.5
• tlsuv: v0.32.6[OpenSSL 3.3.1 4 Jun 2024]